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I. INTRODUCTION 



Controlled and combined remote implementations 
of partially unknown quantum operations of multiqubits 

using GHZ states 

An Mill Wan£| 
Group of Quantum Theory, Department of Modern Physics 
University of Science and Technology of China, Hefei, 230026, P.R.China 

We propose and prove protocols of controlled and combined remote implementations of par- 
tially unknown quantum operations belonging to the restricted sets [An Min Wang: PRA, 74, 
032317(2006)] using GHZ states. We detailedly describe the protocols in the cases of one qubit, 
respectively, with one controller and with two senders. Then we extend the protocols to the cases 
of multiqubits with many controllers and two senders. Because our protocols have to demand the 
\^ \ controller(s)'s startup and authorization or two senders together working and cooperations, the 

■ controlled and combined remote implementations of quantum operations definitely can enhance 

' the security of remote quantum information processing and potentially have more applications. 

CNj I Moreover, our protocol with two senders is helpful to farthest arrive at the power of remote im- 

plementations of quantum operations in theory since the different senders perhaps have different 
O ' operational resources and different operational rights in practice. 

o 

m 

> 
o 

' Quantum teleportation [l| is one of the most striking developments in quantum theory. It indicates that a quantum 
state can be remotely transferred in a completely different way compared with a classical state. Thus, one would 
like to know whether and how a quantum operation can also be remotely transferred in a completely different way 
compared with a classical operation. This problem is just so-called the remote implementation of quantum operation 
(RIO), which was ever studied successfully by Huelga, Plenio and Vaccaro (HPV) '5, "s] for the case of one qubit. 
Recently, we proposed and proved a protocol of remote implementations of partially unknown quantum operations of 
multiqubits via deducing the general restricted sets and finding the unified recovery operations y| . 
-j-J ■ Remote implementation of a quantum operation means that this quantum operation performed on a local system 
^ (sneder's) is teleported and it acts on an unknown state belonging to a remote system (receiver's) j^l^^. Here, a 
^ sender is a person who transfers a quantum operation, and a receiver is a person whose system receives this quantum 
operation and this quantum operation acts on an unknown state belonging to him/her. Obviously, the RIO is different 
• • from simple teleportation of quantum operation without action, and it is also not an implementation of nonlocal 
. 5^ ' quantum operation j5|, |6j , although there are the closed connections among them. Actually, all of them play the 
,: important roles in distributed quantum computation |^ |^ , quantum program 0, and the other remote quantum 
$H information processing tasks. Recently, a series of works on the remote implementations of quantum operations 
5^ appeared and made some interesting progress both in theory 0; 0, Pi a-nd in experiment 0, 0, 0| . 

Both HPV's and our recent protocols use Bell states as a quantum channel. However, it is well-known that 
GHZ states |l3j are also very important quantum resource in quantum information processing and communication 
(QIPC). Just motivated by the scheme of teleportation of quantum states using GHZ state [H IH IH and the 
fact that it has been successfully applied to quantum secret sharing 17J, we would like to investigate the remote 
implementations of quantum operations using GHZ state(s). Nevertheless, the more important motivations using 
state(s)in our protocols are to enhance security, increase variety, extend applications as well as advance efficiency via 
fetching in some controllers and two senders. Our results again indicate that GHZ states are powerful resources in 
QIPC. 

It is useful and interesting to investigate the remote implementations of partially unknown quantum operations 
because they will consume less overall resource than one of the completely unknown quantum operations, and such 
RIOs can satisfy the requirements of some practical applications. Here, the "partially unknown" quantum operations 
are thought of as those belonging to some restricted sets which satisfy some given restricted conditions. In Refs. 
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y, y{ , the restricted sets of quantum operations were seen to be still a very large set of unitary transformations 
because their unknown elements take continuous values. In the simplest case of one qubit, two kinds of restricted sets 
of quantum operations are, respectively, a set of diagonal operations and a set of antidiagonal operations ■ For the 
cases of multiqubits, we obtained the general forms of restricted sets of quantum operations and the unified recovery 
operations, then proposed and proved our protocol of remote implementations of quantum operations belonging to 
the restricted sets in our recent work Specially, our restricted sets of quantum operations are not reducible to a 
direct product of two restricted sets of one-qubit operations, our recovery operations have general and unified forms, 
and so our protocol can be thought of as a development of HPV protocol to multiqubits systems but not a simple 
extension of HPV protocol ■ 

It must be emphasized that the main advantage using GHZ states in the RIO protocols is to provide ability for 
fetching in (many) controller(s) or/and more than one sender. When there is(are) the controller(s), we call the remote 
implementation of quantum operations as controlled one, when there are more than one sender, we called the remote 
implementation of quantum operations as combined one. A controlled remote implementation of quantum operation 
has to have the controllers' participation. A combined remote implementation of quantum operations has to have the 
senders' cooperation. Otherwise, the RIOs cannot be faithfully and determinedly completed. 

In the controlled RIOs, not only a controller plays such a role that the quantum channel between sender and receiver 
is opened by his/her operations, but also the controller's measurement (classical information) impacts the form of 
the sender's operations or the receiver's operation. This implies that the controller's action contains "start up" and 
"authorization" so that the RIOs can be faithfully and determinedly completed. Just based on this fact, we can say 
the controlled RIOs definitely enhance the security of remote quantum information communication and processing. 
In addition, varying with the ways of authorization by the controller, the steps in RIO protocols have their different 
forms. It seems to bring about some complicated expressions of our protocols, but aiming at the different cases, the 
controlling process needs such variety. For example, if the controller trusts in the sender or is easy to communicate 
with the sender, he/she authorizes to the sender; if the controller trusts in the receiver or is easy to communicate with 
the receiver he/she authorizes to the receiver; if the controller hopes to keep the "say last words", he/she authorizes 
to the receiver at a chosen stage of the protocols. 

While in the combined RIOs, the later sender has to obtain the classical information from the former one by one 
in the sending sequence of protocols so that he/she can correctly choose his/her operation. Therefore, the combined 
RIOs can also definitely enhance the security of remote quantum information communication and processing. Note 
that the security enhancement is in classical sense, this can be called so-called "sequential multiple-safety" . This 
concept can be understood and illustrated by a classical example of opening safe-deposit box. For simplicity, let us 
only consider the case of sequential double-safety. This example is how to open a safe-deposit box with two locks and 
its every lock has a set of various keys. Suppose the set of keys of the first lock are kf,kf,---, the set of keys of 
the second lock are fc^, /c^, • • • . Opening the safe-deposit box needs to use the sequential and paired keys {kf, fc^), 
or (fcf , kf), • • • to complete it. Otherwise the safe-deposit box can not be opened. In other words, two guardians 
(corresponding two senders) have to cooperate each other. When the first guardian opens the first lock using some 
given key fcf (corresponding a quantum operation belonging to some given restricted set), he/she has to tell the 
second guardian his/her using C key so that the second guardian can correctly use k2 to open the safe-deposit box. 
Of course, we can say that the combined RIO has higher security. In addition, in the combined RIOs, our protocol 
with two senders is also helpful to farthest arrive at the power of RIOs in theory. Actually, since it is possible that 
different senders have different operational resources and different operational rights in practice, their cooperations 
can combine more or more suitable operations and then our protocol with two senders has a higher practical power 
of RIOs than one with only one sender. 

Note that in this paper, we only use three partite GHZ states in our protocols. Therefore, we have at most two 
senders if only using N GHZ states in the cases of N qubits. In fact, when using more than three partite GHZ states, 
we can further extend our protocols to the cases of more than two senders, even many controllers and many senders 
together. 

Because the no-cloning/broadcast theorem |0, forbids faithfully to transfer an unknown, even partially 
(un)known quantum operation to two locations at the same time, we give up to consider such a scheme. How- 
ever, alternatively, we can construct a symmetric scheme among three parties (locations), in which every parter plays 
a role among sender, receiver and controller in the controlled RIOs, or two parters play two senders and the other 
parter plays a receiver in the combined RIOs. 

Besides Sec. |2 is written as an introduction, this paper is organized as follows: in Sec|nl we simply recall the 
RIO protocols using Bell states and introduce our restricted sets of quantum operation of multiqubits; in Sec. IIIII 
we propose and prove protocols of controlled remote implementations of partially unknown quantum operations of 
one qubit using one GHZ state; in Sec. IIVI we propose and prove a protocol of combined remote implementations of 
partially unknown quantum operations of one qubit using one GHZ state; in Sec. by aid of the explicit form of 
our restricted sets of quantum operations of N qubits Q and the general swapping transformations, we extend our 
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protocols to the cases of multiqubits; in Sec. IVII we summarize and discuss our results; in appendixes, we analyze the 
general swapping transformations used in this paper, and provide the proofs of our protocols in detail for the cases of 
more than one qubits. 



II. RIO USING BELL STATES 



In the HPV protocol [^|^, the joint system of Alice and Bob initially reads 
where 



I'J'+Ub = ^ (|oo>^B + 111) 



AB) 



(1) 



(2) 



is one of four Bell states which is shared by Alice (the first qubit) and Bob (the second qubit), and the unknown state 
(the third qubit) 



l^)y = yo|0)y+2/i|l)5 



(3) 



belongs to Bob. Note that the Dirac's vectors with the subscripts B, Y in the above three equations indicate their 
bases, respectively, belonging to the qubits A,B,Y. 

The quantum operation to be remotely implemented belongs to one of the two restricted sets defined by 



U{0,u) 
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(4) 



We can say that they are partially unknown in the sense that the values of their matrix elements are unknown, but 
their structures, that is, the positions of their nonzero matrix elements, are known. In our notation, a restricted set 
of one-qubit operations is denoted by U[d,u), where d = or 1 indicates, respectively, this operation belonging to 
diagonal- or antidiagonal restricted set, while u is its argument (unknown elements). 

The simplified HPV protocol can be expressed by five steps, which is made of Bob's preparing, the classical 
communication from Bob to Alice, Alice's sending, the classical communication from Alice to Bob and Bob's recovering 
0. The whole protocol can be illustrated by the following quantum circuit: (see Fig.l): 
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FIG. 1: Quantum circuit of the simplified HPV protocol, where U{d) is a quantum operation to be remotely implemented and 
it is diagonal or antidiagonal, H is a Hadamard gate, ab,crd are identity matrices or NOT gates (ai) with respect to 6, d = 
or b,d — 1, respectively, and r(a) = (1 — a)ao + aa^ is an identity matrix when a = or a phase gate (as) when a — 1. The 
measurements \a){a\ and \b){b\ axe carried out in the computational basis (a, 6 = 0, 1). (crewel with an arrow) indicates 

the transmission of classical communication to the location of the arrow direction. 

In order to extend the RIO protocol to the cases of multiqubits, we first have to seek for the correct restricted sets 
of quantum operations of multiqubits that can be remotely implemented in a faithful and determined way. Actually, 
we have obtained their general and explicit forms in our recent works 4], that is, the restricted sets of quantum 
operations of N qubits have such forms that every row and every column of operations belonging to them only has 
one nonzero element. Thus, it is easy to know that there are 2^! restricted sets of operations in the iV-qubit systems. 
Denote the xth restricted set by TJ^{x,t), and its nonzero element in the mth row by tm, we have 



2" 

T^{x,t) = ^ tm\m,D){prn{x),D\. 

m— 1 



(5) 
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Here, a; = 1, 2, • • • , 2^ and 

P{x) = {pi{x),p2{x),--- ,P2'^{x)) (6) 

is an element belonging to the set of all permutations for the list {1, 2, • • • , 2^}. Moreover, when the requirement of 
the unitary condition is introduced, tm will be taken as c"^"* , and (pm is real. 

To remotely implement quantum operations belonging to the above restricted sets, the sender (s) needs a mapping 
table which provides one-to-one mapping from TJ^{x, t) to a classical information a; (x = 1, 2 • • • , 2^!), and the receiver 
knows a mapping table which gives out one-to-one mapping from a classical information x {x = 1,2 - ■ ■ , 2^!) to Rn{x) 
defined by 

RN{x)=T;f{x,0) = J2 \m,D){pm{z),D\. (7) 

m— 1 

Obviously, it has the same structure as TJ^{x,t) to be remotely implemented, and it is an important part in the final 
recovery operation. 

For simplicity, lot us consider the case of two qubits. It is clear that there arc 24 kinds of restricted sets of quantum 
operations that can be remotely implemented. In our RIO protocol, we use two Bell states |$"'")aiBi, |^''')a2B2 ^ 
the quantum channel, where qubits Ai , A2 belong to Alice and Bi , B2 belong to Bob. Initially, an unknown state 
|^)yjy2 also belongs to Bob. Bob first performs two controUcd-NOT (C"°*) transformation by using Yi.Yz as control 
qubits and Bi , B2 as target qubits, respectively. Then he measures his qubits Bi and B2 in the computational 
basis |6i)bi(6i| g) 162)32(^2!, where 61,62 = 0,1 and sends the results to Alice. After receiving the two classical 
bits, Alice first carries out the quantum operations cr^^ (g) cr^^ on her two qubits Ai,A2. Next Alice acts T2{x,t) 
on A1A2 and executes two Hadamard gate transformation H^^ (g) Hj^^. Then, she measures her two qubits in the 
basis |ai)^^(ai| (8 |a2)A2(«2|(ai, 02 = 0,1) and sends the results 0102 and x to Bob. As we have mentioned, the 
transmission of x is to let Bob choose R2 (x) correctly. With these information, Bob's recovery operations are taken as 
[r^i(ai) (g) r^^(a2)] R2{x), where t{y) — (1 — j/)a"o + 2/o"3. Finally, our protocol is completed faithfully and determinedly 
through the above five steps. 



III. CONTROLLED RIO IN THE CASES OF ONE QUBIT USING ONE GHZ STATE 

Now, let us first investigate the controlled remote implementations of quantum operations belonging to restricted 
sets of one qubit using one GHZ states. Without loss of generality, we can write the initial state in a symmetric form 
of three partite subsystems: 

|*-) = |GHZ+)^5c|x);,IO^|C)x, (8) 

where the GHZ state has the form 

|GHZ+) = i=(|000) + |lll)). (9) 

It is shared by Alice, Bob and Charlie. While Ix)^' \0y ^^'^ \0z unknown states of one qubit system. The 

six qubits of the joint system are divided into three pairs, in which, the qubits A and X belong to Alice, the qubits 
B and Y belong to Bob, and the qubits C and Z belong to Charlie. Obviously, their roles are initially symmetric for 
the remote implementations of quantum operations of one qubit. 

In order to clearly express our protocol and strictly prove it, specially, for the cases of multiqubits, we denote that 
the Hilbert space of the joint system is initially taken as a direct product of all qubit Hilbert spaces according to the 
following sequence: 

H = Ha Hb He Hx <» Hy <» Hz- (10) 

We can simply call this direct-product "space structure" and denote it by a bit-string, for example, the space structure 
of the above Hilbert space is ABCXYZ. Note that the above space structure is only a notation rule used here, it 
is absolutely not a precondition of the protocols. If we would like to prove our protocols generally for the cases 
of multiqubits, such a kind of notation rule is convenient. This fact can be seen in Appendix A. Obviously, since 
taking such a space structure, the subspaces belonging to Alice, or Bob, or Charlie are separated. This will lead 
to inconvenience in the whole-space expression of local operations. Therefore, there is the need to change the space 
structure. This can be realized by a series of swapping transformations, which is studied in Appendix A. 
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In our protocols, in spite that only local operations and classical communication are used, the problems we deal 
with are related with the whole system because there is entanglement among various partite subsystems. However, 
knowing the space structure will be helpful for us to understand the effect of local operations. In fact, our protocol 
can be found due partially to the reasons that we clearly express an appreciate space structure and general swapping 
transformations. Therefore, in the following we keep the above sequence of direct products of qubit spaces via the 
whole-space expressions of our formula in the joint system. 

From the symmetric initial state ||SJ|, it is easy to find that any one partite subsystem of them plays a possible 
role among of a sender, a receiver and a controller in the protocols. In other words, when a controller is fixed to a 
given partite subsystem, thus, the other two partite subsystems play a sender and a receiver, respectively. Under a 
controller's permission, the remote implementations of quantum operations belonging to the restricted sets is faithfully 
and determinedly completed between the other two subsystems (locations). 

Actually, we are always able to swap their positions in a given space structure among three partite subsystems 
using so-called general swapping transformations that are studied in Appendix A. Without loss of generality, as soon 
as a controller is chosen or dominated, we can rewrite the initial state space structure as 

-f^Controllcr ^ -f^Scndcr ® -f^Rcccivcr -H^Unknown State- (11) 

This means that the first qubit belongs to the controller, the second qubit is in the sender's partite subsystem (the 
local subsystem), the third qubit is mastered by the receiver, and the fourth qubit is an unknown state in the receiver's 
hands. Obviously, the unknown states belong to sender and controller are needless in the protocol as soon as the roles 
of attendees are fixed. 

When introducing a controller, our protocol of controlled remote implementations of quantum operations belonging 
to the restricted sets is made up of seven steps, in which, there are four steps of quantum operations including 
measurement and three times of classical communications. They are described as the following: 

Controlling Step: This step is carried out by the controller. He/She performs a Hadamard transformation 

on his/her controlled qubit I7), and then measures it in the computational basis |7)(7| (7 = 0, 1), that is 

C(7) = {\j)h\H)<S>Is, (13) 

where is a m dimensional identity matrix. 

This step is a key matter in our protocol. In fact, when the controller has not done it, there is no quantum 
entanglement between any two partite subsystems, so there is no any feasible remote implementations of operations. 
Only if a controller agrees or wishes that the other two partite subsystems implement the RIO protocol, he/she carries 
out this operation and measurement. Its action is to open the quantum channel between the sender and receiver that 
is necessary for the remote implementation of operations belonging to the restricted sets in a faithful and determined 
way. 

Allowing Step: This step is still completed by the controller, that is, he/she transfers one c-bit 7 to the sender or 
the receiver, which is denoted by Ccs(7) or Ccrij), respectively. 

This allowing step as well as the above controlling step can be arranged at any time in the RIO process, however, 
the different arrangement will result in influences on the steps of our protocols. If the classical bit 7 is arranged 
to transfer to the sender, this communication has to be done before the other parts of sending operations. If the 
classical bit 7 is chosen to transfer to the receiver, this communication is able to be done at the beginning (before 
receiver's preparation), or in the middle (before the recovered operations), or at the end (after the standard recovered 
operations). At these cases, although the receiver can have the different choices to finish the protocol, we prefer to use 
a unified method for the RIO of one qubit, that is, we use the classical information 7 before the end of our protocol. 

This step can be understood figuratively as that the controller distributes the "password" 7 to one of the sender and 
receiver, or gives an authorization to one of them, or says last word (to the receiver) in our protocols. This indicates 
the role of controller is very important and indispensable. Without the password distribution by the controller, the 
sender and receiver cannot faithfully and determinedly complete the RIO. This can be clearly seen in the following 
proofs about our protocols. 

Preparing Step: This step is carried out by the receiver. There are two kinds of cases, respectively, based on whether 
the classical information from the controller is obtained by the receiver or not. 

o Case one: If the receiver does not obtain the classical information from the controller, he/she first performs a 
controUed-NOT using his/her the qubit occupied by the unknown state as a control, his/her shared part (the qubit 
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1/3)) of the GHZ state as a target, and then measures his/her shared part of the GHZ state in the computational basis 
1/3) (/3| [fi = 0,1), that is 

V[P) = /4 0[(|/3)(/3|)®ao][ao®(|O)(O|)+ai®(|l)(l|)] 

= /4® [(|/3)(/3|)®ao]C"°*(2,l), (14) 

where ctq is 2 x 2 identity matrix and ai {i = 1, 2, 3) are the Pauh matrices, and (7"°* is a controUed-NOT defined by 

/ 1 \ 

C"°'(2,l) = ao®(|0)(0|) + ai®(|l)(l|)= q q J J • (15) 

\0 1 0/ 

while (2, 1), as the variable of C"°*, indicates that the second qubit is a control and the first qubit is a target. 

The purpose of this step is to let the unknown state be correlated with the sender's local qubit. This is a precondition 
that the sender is able to remotely implement a quantum operation belonging to the restricted sets. 

o Case two: If the controlling step has happened and the receiver gets the classical bit 7 from the controller, the 
preparing step has three different forms according to the time to obtain the classical bit c in general. 

(1) When the classical bit 7 is known at the beginning of this step, the receiver has to add a prior operation 

pp™(7) = /4 (g) [(1 - 7)(jo + 70-3] ®aQ = lA® r(7) ® ctq (16) 
before the above operation l|14|) . Here r(a) is a diagonal phase gate with a parameter that is defined by 

r(z) = (1 - z)ao + - ( J 1 _°2z ) = ( J (-V ) ' ^^^^ 

Note that z = 0, 1, and then (—1)^ = 1 — 2z. Of course, since it commutes with the project measurement, it also can 
be inserted between the measurement and the controlled not in the operation H14|l . 

(2) When the classical bit 7 is known after the operation H14I) or before next recovery operation, the receiver 
performs a supplementary operation 

7'"f*(7) =^4®r(7)®r(7), (18) 

where we have used the fact that 

(r(7) ® r(7)) [(|/3)(/3| ® a^) C"°*(2, 1)] = [(|/3)(/3| ® a^) C"°'(2, 1)] (r(7) ® ^0) • (19) 

(3) When the classical bit 7 is known after the next recovery operation, this case is discussed putting in the following 
recovery step. It is clear that for the above two cases, the receiver always can delay using the classical information up 
to after recovery operation. Therefore, this case is more general. However, it will be seen that the delaying method 
is able to lead in the unexpected complication in the recovery step for the cases of multiqubits. 

Classical Communication from receiver to the sender. This step is that the receiver transfers a c-bit (3 to the sender, 
which is denoted by Crs(/3). 

The aim of this step is that the receiver tells the sender that he/she is ready for receiving the remote operation, as 
well as his/her preparing way. 

It must be emphasized that for the cases of one qubit, the receiver's preparing has two equivalent ways with respect 
to /3 = or 1, respectively. If the receiver first fixes the value of /3 and tells the sender before the beginning of protocol, 
this step can be saved. In particular, when (3 is just taken as 0, the sender also does not need the transformation cr^ 
in the next step, since uo is trivial. 

Sending step: This step is carried out by the sender. There are two cases. 

o Case one: There is no classical information transferred from the controller to the sender. Thus, after receiving a 
classical bit /3 from the receiver, the sender carries out her/his sending operations which are made of four parts (or 
five parts in the case two). The first one is simple cr/3 

Vs{P)^l2®cTi3®h- (20) 



The second part of sending step is the operation U{d,u) to be remotely implemented acting on his/her local system 
(the qubit |a), a shared part of the GHZ state). The third part of sending step is simple a Hadamard gate. The 
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fourth, also the final part is a measurement on the computational basis |a)(a| {a = 0, 1). All parts of Alice's sending 
can be jointly written as 

S{a, (3; d, u) = {ctq ® [HU{d, u)(Ji3\ ® h} . (21) 

The action of the first part is to perfectly prepare the state of joint system as such a superposition that the basis 
in the locally acted system (belonging to sender's subsystem) of every component state is the same as its basis in 
the remotely operated system (belonging to the space of unknown state in Bob's subsystems) and the corresponding 
coefficients are just ones of unknown state. 

The second part of sending step is just an operation belonging to the restricted sets, which will be remotely 
implemented in our protocol. 

The third part of sending step, the Hadamard gate, is often seen in quantum computation and quantum commu- 
nication. Its action is similar to the cases in the teleportation of states. 

The fourth part of sending step is a measurement on the computational basis whose aim is to project to the needed 
result. 

o Case two: The sender obtains the classical information 7 from the controller, he/she has to add to a prior operation 

^add^^-) fJo «> [(1 - 7)cro + 7^3] ®h = (To® r(7) (g) Ia (22) 
at the beginning of this step. This means that the sending step becomes 

S^'\a,P,r,d,u) = {(70 ® (|a)(a|) [HU{d,u)a(i\ ® hjSf^'i-/). (23) 

Classical Communication from sender to receiver. This step is that the sender transfers the classical information a 
and d to the receiver, which is denoted by Csr{a;d). 

This step is that sender tells the receiver what measurement (denoted by a) has been done and which kind of 
operations (denoted by d) has been transferred. In our protocol, the sender has a one to one mapping table to 
indicate a kind of restrict set by a value of classical information. For the cases of one qubit, it can be encoded by 
one c-bit, in which, denotes a restricted set of diagonal operations and 1 denotes a restricted set of antidiagonal 
operations. 

Recovery Step: This step is carried out by the receiver. After receiving a classical bit a from the sender, the receiver 
first requires to do a recovery operation that consists of two parts or three parts. The first part is r(a) and the second 
part is a fixed form of a restricted set which has the same structure as the U{d,u) to be transferred remotely but 
its nonzero elements are set as 1. For the cases of one qubit, the fixed forms of the restricted sets of diagonal- and 
antidiagonal operations are, respectively, ctq and ci. Therefore, the receiver's recovery operations are written as 

7^(a; d) = /g ® [r(a)ad] , (24) 

where d = or 1. 

It must be emphasized that the above TZ{a; d) only can guarantee the operation U{d, u) is faithfully and determinedly 
transferred, if the protocol sets that the controller transfers his/her classical bit 7 before its action. Just as statement 
above, if 7 is transferred to the sender, the sender has a prior preparation part; when 7 is sent to the receiver before 
the his/her preparing step, he/she can add a supplementary part at the beginning, in the middle or at the end of 
the preparing step. Obviously, at the end of the preparing is just before the recovering, and so we can move this 
supplementary part to here. However, if the receiver obtains 7 from the controller after the above TZ(a;d) action, the 
receiver has to perform an additional recovery part 

7^^f*(7; d) = i-ir^h ® r(7) ® r(7), (25) 

where x{z) is defined in Eq. ||T7J|. Note that r(7)|/?)(/3| = {-I)''f^\l3){l3\, we obtain its another form 

7^"f*(/?,7;d) = (-l)^('^+'3)jg(»r(7). (26) 

It is clear that when the protocol sets the controller transfers his/her classical bit 7 to the receiver, we always can 
delay using the classical information 7. In other words, in order to standardize the protocol in the cases of one qubit, 
we do not add any pp"^^ and V"'^* in the preparing step, but we always use the above 7?,^^' at the end of the protocol. 
Thus, the whole recovery operations are 



7?,^" (a, 7, d) = 7^^" (7; d)TZ{a; d) . 



(27) 
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However, for the case of multiqubits, it is not so simple. Generally, we put the additional recovery operations before the 
standard recovery operations (|24|l . even before the preparing step in order to have the simplest additional operations 
for the cases of multiqubits. Of course, if we persist put the additional recovery operation in the last, we will pay a 
price that it gets a little complication in expressing. 

In summary, when there is a controller, we have propose four kinds of protocols for controlled remote implementation 
of operations belonging to the restricted sets. (1) the sender obtains password; (2)-(4) the receiver obtains password 
respectively before the preparing, after the preparing (before the recovering) and after the recovering. The second, 
third and fourth kinds of our protocols can be unitedly expressed without obvious difficulty in the case of one qubit. 
If the controller transfers his classical bit 7 to the sender, the sequence of the above steps in our protocol will become 

C{l) Ce.(7) -^V{I3)^ aM ^ S^'\a,(3,r,d) ^ Csr{a;d) ^ 7^(a;d), (28) 

if the controller transfers his classical bit 7 to the receiver, the sequence of the above steps in our protocol is 

C(7) ^ C„.(7) -> V{(3) a-M ^ S{a,f3;d) ^ a,.{a;d) -> 7^^"(a,7;d). (29) 

It is clear that transferring 7 to the sender or the receiver can be figuratively understood as distributing a "pass- 
word" , in special, while transferring 7 to the receiver at the end of protocol, it can be figuratively understood as 
"saying last word". They are both important controlled means. Besides the password distributing, the controller 
owns the right to open the quantum channel. All of this are some main features of a controlled process. Therefore, 
we called the above process as a controlled remote implementations of operations. 

Now, as an example, we fix the controller as Charlie, Alice as a sender and Bob as a receiver without loss of 
generality. Thus, the initial state is simplified as 

l^iiW) =^4"'(l,3)[|GHZ+)c^5l0y], (30) 

where F^il, 3) is a forward rearrangement made of two swapping transformations between the neighbor qubits, which 
is defined in Appendix A. Similarly, we can discuss the other choices of the controller, sender and receiver, but we do 
not intend to discuss here. 

If we set that the Charlie (controller) transfers the password to sender. It is the first kind of our protocols. All of 
the operations and measurements in our protocol can be jointedly written as 

lRia,b,c;d) = F^'il,3) {{\c)c{c\H'') (g> {\a)^(a\H^U{d,u)aMc)) 

® [(ao<»r(a))C"°*]}F4(l,3). (31) 

Note that the operations with the superscripts A, C denote their Hilbert spaces belonging, respectively, to the spaces 
of qubits A, C. Sometimes, if there is no any confusion, we omit these superscripts. This whole space form of our 
protocol has covered up the sequence of operations and steps of classical communication, but its advantage is clear. 
Its action on the initial state H30|l yields 

\^fi'cYia,b,c;d))=lRia,b,c;d)\^-%CY) = ^\abc) ^^c ^ Uid,u)\OY- (32) 

The unknown state to be remotely implemented is just \S,)y i^i Bob's partite subsystem defined by Eq.Q- Our 
protocol is then determinedly and faithfully completed. 

When setting that Charlie's information transfers to Alice, the whole process of controlled remote implementation 
of quantum operations belonging to the restricted sets is shown in Fig. 2. 

Here, we only express the full operations for the first kind of our protocols, and provide its figure of quantum 
circuit. For the other three kinds of our protocols, the full operations and the figures of quantum circuits are similar. 
In addition, we should notice that the controller cannot choose who is a sender and who is a receiver in the other two 
partite subsystems. In other words, when Charlie is a controller, either of Alice and Bob can be chosen as a sender 
and the other one partite subsystem plays a receiver. 

In the end of this section, let us prove our above protocol in detail. For simplicity, we only consider the cases that 
Alice is a sender. Bob is taken as a receiver, and Charlie is a controller. Initially, the joint system is in the state H3U|I . 
When Charlie agrees or wishes that Alice and Bob can carry out the remote implementations of quantum operations 
belonging the restricted sets, he will open the quantum channel between them by preforming the controlling operation 
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r(c) 



B \GHZ^ 



cm 



CTb -U(d)-H - fp\ 



\b)(b\ 



r{a) 



■U{d)\^) 



FIG. 2; Quantum circuit of the controlled remote implementations of quantum operations with a controller Charlie. Here, 
U{d) belonging to the restricted sets is a quantum operation to be remotely implemented, H is a, Hadamard transformation, 
(JbjCTd are identity matrices or NOT gates (cri) for b,d = or b,d = 1 respectively, and r{x) = (1 — x)ao + xa^ is equal an 
identity matrix if a; = or a phase gate if a; = 1. The measurements |a) (a|,|6) (6| and |c)(c| are carried out in the computational 
basis (a, b,c — 0,1). (crewel with an arrow) indicates the transmission of classical communication to the location of arrow 

direction. 



on his qubit. His action gives 



|*ABcy(c)) 



^4-1(1,3) [\c)c ® (100)^5 + {-ir\n)^g) ® 10^] 



F4-i(l,3)C(c)^^4(l,3)|* 

1 

2 
1 

2 
1 



ml \ 
ABCY/ 



F^'{1, 3) (do ® r(c) ® h) [\c)c ® (|00) 



'AB 



111' 



AB. 



F^\l, 3) ih ® r(c) ® do) [|c)c, ® (|00) 



'AB 



|ll>As)® 10 



Yi ' 



(33) 
(34) 
(35) 



where we have used the definition of r(y) in Eq. (|17|l . Thus, Alice and Bob now share a Bell state, and they can carry 
out the protocol of RIO. However, because HPV protocol is dependent on the type of Bell state, Charlie has to send 
the "password" c to Alice or Bob. Actually, this indicates the Charlie has his control right. 
We need to consider two cases. 

The first case is that the protocol sets Charlie to transfer his classical information c to Alice. Using 7^(6), Bob 
prepares his state as 



I ^ ABCY 



(6,c)) = F^'il,3)V{b)Fi{l,3)\^ 



ABCY / 



Note that 



- i [F4"i(l,3)(/2®r(c)®/4)] |c)c®{ao® [(|5)(6|®ao)C"°']} 



{a,®[{\b){b\)c-°\2A)]}mk) + \nk))] 

[ao ® (|6)(6|) ® ao] {(|000) + |110)) 4o + (|011) + |101)) 4i} 
(|050)5fco + |lW)(5bi)4o + mi)5bi + |161)4o)4i 
[|660) (<5w + 5bi) 4o + 1(1 - b)bl) {5bi + <5w) 4i] 
(cTfc®/4)(4o|050)+4i|lW)) 
(cTfc (g) h) (4o + 4i) Ifcfefc) 

{(Tb®h) \kbk), 



(36) 



where we have used the facts that (7b\b) = |0) and ab\l — b) = |1) for 6 = 0, 1. It results in 

1 



\KBCYib, c)) 



[F^\2,4) iv{c)ab Is)] [(yolOO) 



AY 



■yilii; 



«) 1 6c) 



(37) 



(38) 
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After Bob is ready, he transfers a classical bit b in order to tell Alice his preparing way. So Alice starts with a 
supplementary operation so that the state of joint system is perfectly ready via the H22I) . that is 



(39) 



vl/;(6,c)) = F,-\l,3)SfHc)F,il,3)\^^scY) 

Therefore, Alice's sending step yields 

\^^a,b,c;d)) = F^\l,3)S^"ia,b,c,d)Fi{l,3)\^PgcY) 
1 



Y,yk{a\HUid,u)\k)\a)A\k), 



\bc) 



BC 



(40) 



The second case is that the protocol sets Charlie to transfer his classical information c to Bob. If Bob choose 
to first perform T^p''^, then its action is the same as Alice's. Therefore, when Alice finishes the sending operation, 
we also obtain Eq. gUJ). Note that 'P''^*-{c)'P{b) = V ib)'PP'° (c) , we can, after 'P(6) acting, use V^\c). From 
7?.(a; (i)'P^^*(c) = {—lY'^V^^^ {c)TZ{a; d) , this also means that Bob can delay the additional recovery operation to the 
end. It is clear that the results of three kinds of procedures are the same. 

Now, Bob performs recovery operation (|24|l . From the relation that U{d,u) = U{0,u)ad, and the facts that 
U{0,u) = E-=o"jb')01 and r(a) = ELo(-l)"'IOaL it follows that 



|vI/«"-i(a,6,c;rf)) = F4-l(l,3)7^(a,rf)F4(l,3)|vI/^Bcy> 

" 1 

Y,yk{a\HUid,u)\k)\a)^{x{a)ad\k)y) 



L k 



(g) 1 5c) 



BC 



-\a)^^F^\l,3) 



j=o k=o 1=0 



Note that 



we have 



X {{j\a,\k){-ir{l\a,\k)) \l)y] \bc)^^} 
{jWd\k){l\(7d\k) = {j\ad\k)Sji, 



|vl/fi-i(a,6,c;d)) = -\a)^(dF-\l,3) 



Y,Y.''M-^rHa\H\j){j\ad\k)\j), 



(g) \bc) 



BC 



Since 



'ir{a\H\:j) = 



(41) 
(42) 

(43) 
(44) 



for any a and j, the above equation becomes 

1 



|«'«"^i(a,6, c; d)) 



2V2 
1 



a)^(^F,~\l,3) 



1 



2V2 



\a)^(g>F,-\l,3) 

.k=Q 

\abc)j^Bc®U(d, u)\CjY 



1 1 

^'^Ujyk{i\(Td\k)\i) 

j=0 k=Q 
1 

Y,ykU{0,u)ad\k) 



(g> \bc)g(j 
® \bc)Bc \ 



(45) 



That is, we obtain the conclusion H32|) of our protocol. Therefore, we finish the proof our protocols of controlled RIO 
with a controller in the cases of one qubit. 
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IV. COMBINED RIO IN THE CASE OF ONE QUBIT USING ONE GHZ STATE 

Now, let us consider a quantum operation that is a product of two parts hi2 and hii, that is, hi — U2U1. Assuming 
Ui and U2 both belong to the restricted sets, we can denote them by U{di,u) and U{d2,v), respectively, in our 
notation. Thus, the remote implementation of h( can be completed via sending Ui and U2 in turn by one sender in 
the known protocols but two shared Bell pairs are needed. However, we find that this task can be faithfully 

and determinedly completed by two senders via one GHZ state. Moreover, we will see that the RIO protocol with 
two senders using one GHZ state has higher security compared with one using two Bell states. More analysis about 
the security enhancement has been given in our introduction. 

Without loss of generality, we set Alice and Bob as two senders, and Alice first sends U{di,u), Bob then sends 
U{d2, v). Charlie plays a receiver. Except for the unknown state is replaced by |C) — zo\0)^ + zi\l)^, the initial state 
has not the other difference form Eq. H3()(l . Since the significance and actions of the most related operations have 
been explained in Sec. IIIII we do not intend to repeat them here. Our protocol is made of the following seven steps. 

Step one: Charlie's preparing. 

Vc{c) ^h® [(|c)c(c|) ® al] [o^ ® (|0)^(0|) + af ® (|1)^(1|)] . (46) 

Step two: First classical communication. Charlie sends the classical information c to Alice and Bob. 
Step three: Alice's sending. 

SAia,c;di,u) = {\a)^{a\) [iJ^C/(di, m)] ® h. (47) 

Step four: Second classical communication. Alice sends the classical information di to Bob and a to Charlie. 
Step five: Bob's sending. 

SB{b,c;di,d2,v)=ao®{\b)s{b\)[H''U{d2,v)] (a^a^) ® h. (48) 

Step six: Third classical communication. Bob sends the classical information b and d2 to Charlie. 
Step seven: Charlie's recovering 

nc{a,b;di,d2) =/4(gcrf (g(r(6)CTdJ.(r(a)CTdi). (49) 

All of the operations and measurements in our above protocol can be jointly written as 

lRia,b,c;di,d2,u,v) - {\a)^{a\H^Uiduu)af) ® {\b) g{b\H''U{d2,v)ad,a^) 

X [{\c){c\ <E> t{b)adAa)<Jd,)C^°'] . (50) 

Its acting on the initial state gives 

l^ii^'^^a, b, c; di, da, w, v)) = Ifl(a, b, c; di, da, m, v)\^'S') = ^^\abc) ^^^j ^ U{d2, v)U {di , u)\() ^ , (51) 

where a, 6, c = 0, 1 denote the spin up or down, and di, da = and di, da = 1 respectively indicate the operations of 
diagonal and antidiagonal restricted sets. Therefore, the remote implementations of the combination of two quantum 
operations belonging to restricted sets are faithfully and determinedly completed. It can be called the combined 
remote implementation of quantum operations which can be displayed by Fig. 3. 
In order to prove our protocol with two senders, we first need the equation 

{ao «) [{\c){c\ (E) ao) C"°'(2, 1)] } |GHZ+) (g) \k) = i^4"^(3,4) (a, (g)ac<E) h) {\kkk) ® |c)) . (52) 

Its proof is similar to Eq. (|37|l . Therefore, Charlie's preparation gives 

l*''^) = Vc{c)\^'tBcz) 

= i=F-i(3,4) [(ac (g ae (g h) {z^m ab ® |0)y + ^i|ll)Ai3 ® \^)y) ® ' (53) 

where F]s[{i,j) is defined in Appendix A. 

After receiving the classical information c from Charlie (receiver), Alice supplements a ac transformation, and then 
performs the first sending operations, we have 

|*f (a,c; di,u)) 



SA{a,c, di,u)|*^(c)) 
" 1 

J2 Zk{\a)^{a\HU{d,,u)\k)) (a,|fc)^) |fc), 



1 

V2 



^r'(3,4) 



(54) 



.k=0 
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H 




rA 



B \GHZ^ 



c V Q n\ 



JL_ 



I 



a ){a 



t/2(rf2) 




H 





m 



r{a) — CTrf 



rib)-U2id2)Ui{d,)\g) 



FIG. 3: Quantum circuit of the combined remote implementation of quantum operation with two sender Ahce and Bob . Here, 
Ui{di) and (72(^2) are respectively a part of the quantum operation U{d\,d2) = U2{d2)Ui(d\) that is remotely implemented 
by combining Alice and Bob's actions, H is & Hadamard transformation, (Jc,(^di,(^d2 are identity matrices or NOT gates (cti) 
for c, di, d2 =0 or c,di,d2 — 1 respectively, and r{x) = (1 ~ x)ao + xas is an identity matrix if 2; = or a phase gate (0-3) if 
X — 1. The measurements |a) (a|,|fe) and \c){c\ are carried out in the computational basis {a,b,c = 0, 1). "=>" (crewel with 
an arrow) indicates the transmission of classical communication to the location of arrow direction. 



Alice again tells Bob di and Charlie a. In succession, based on the classical information c (coming from Charlie) and 
di (coming from Alice), Bob first carries out (Jd^ac, and then performs the second sending operations: 

l^ff (a, 6, c; di, ci2, u, w)) = 5_b(6, c, rf2, w) |^'f (a, c, di, m) 

1 



1 



V2 



^4"' (3, 4) 



J2zk{\a)^{a\HU{duu)\k)^ 



.k=0 



<i^i\b)g{b\HU{d2,v)adAk)B)\k)Y]®\c), 

Finally, Bob's recovery operation gives 

|\E'*^"'''(a, 5, c;(ii,d2,u,w)) = 7?._B(a, 6, di, d2)|*2 (°^; c, di, ^2, u, w) 



(55) 



Y,^k{\a)^{a\HUidi,u)\k)) 



xi\b)g{b\HUid2,v)adAk)) 

(g) x{b)ad2^{a)<7di \k) z\ ® \c)c- (56) 

The remaining steps of this proof is similar to the ones in the end of Sec. IIIII but it needs to repeat three times. 
First, using U{di,u) = U(0,u)ad^ = Y]^aUj\j){j\adi and r(a) = I]/=o(~l)"'IO(^l we have 



**^"^na.^c;di,d2,u,w)) = 



V2 



111 

j=0 k=0 1=0 

(g>{\b)g{b\HUid2,v)adAk)) 
(g>x{b)ad,i-ir'\l)Y{lWdAk)] \c)c 
Because that {j\ay\k) {l\adi\k) = Sji{j\ay\k) , it becomes 



'C- 



(57) 



5'^"^'(a,5,c;di,d2,u,w)) —=\ab)^Q(» 

v2 



1 1 

5]^^,y,((a|i/|j)(-i; 

j=Q k=a 



X {{b\HU{d2,v)(JdAk)) T{b)(Jd,\j)Y{jWdAk)] <» |c) 
While from (a|iJ|j) (-1)"^ = 1/^2, it follows that 



(58) 



|*fi"-'(a,^c;di,d2,u,«)) = i,\ab) 



AB 



1 1 

^^ii,2/fe((6|iJ(7(d2,«)a,JA:)) 

j=0 k=0 



(59) 
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Again inserted the complete relation after U{d2) and based on the above same reason, the above equation is reduced 
to 



|«'fi"^i(a,6,c;di,c;2,u,w)) = -\ab) 



AB 



111 

E E E "^■y'^ mHu{d2,v)\i) |fc)) 

j=0 k=0 1=0 



= o\ab)AB® 



1 1 

EE"^-y^(<^i^^('^2,i;)b-)) 

j=0 k=0 



(60) 



Repeatedly using the above skills, that is [/(c?2) — U{0,v)(7d2 — X]i=o '^^'l*) (^I'^'^a r(6) = X]Lo(~-'^)^'IO(^l; 
obtain 



1, 



AS 



1111 

EEEE«^"^-yfc((^i^N)<*i^'^^i^')) 

i=0 j=0 fe=0 1=0 



xi-l)'"\l)y{l\adJj)(j\adAk)]®\c) 



111 



EEEw4(^i^N>(-i)'0 

i=0 j=0 *:=0 

x(*k<i2|j)0V<ii|fc)N)y] |c)c 
111 

E E E "■'"jyfc(*kd2 \j) OVdi 10 



1 



■:\ab)AB ® 



1 



2x/2 



1=0 j=0 k=0 

ab)AB ® [U{d2,v)U{di,u)\CiY] ® |c)c- 



ic 



(61) 



The proof of our protocol with two senders using one GHZ state is finished. 



V. PROTOCOLS IN THE CASES OF iV QUBITS 

We have proposed and proved the protocols of controlled and combined remote implementations of quantum oper- 
ations for one qubit using one GHZ state, respectively. The controlled RIO has a controller, a sender and a receiver, 
and the roles of three partite subsystems can be exchanged with each other. The combined RIO has two senders 
and a receiver, and every sender transfers an operation (or a part of one decomposable operation), two transferred 
operations are combined together according to the sequence of transferred time to form a total operation that is 
remotely implemented. In the following let us investigate the cases of multiqubits. 

We have seen that since a controller or an extra sender being fetched in the protocols for the cases of one qubit, 
the entanglement resource really used to the remote implementations of operations is still one Bell pair, in spite that 
our protocols is carried out via one GHZ state. In other words, the design of adding controller or extra sender will 
use a part of the entanglement resource. Therefore, for the cases of more than one qubit, our restricted sets Q are 
still suitable to our controlled and combined RIOs. 



Some notations 



Usually, in order to avoid the possible errors, we need to denote the sequential structure of direct product space 
of qubits, or a sequence of direct products of qubit space basis vectors in the multiqubit systems. For Alice's space, 
we set its sequential structure as A1A2 ■ ■ ■ Apj, in other words, its basis vector has the form |ai)^Ja2)^2 ' ' ' \'^n)ak 
(or \a1a2 ■ ■ ■ (In) AiA2---Am'^' Similarly, we set the sequential structure of Bob's space as B1B2 • ■ ■ B]\jYiY2 ■ ■ ■ Yj\j, in 
other words, its basis vector has the form \bi) B^\b2) ■ ■ ■ |&Af)B„ |^i)yJfc2)Y2 • • • |fcAf)Yjy- K is clear that for a iV-qubit 
system, its space structure can be represented by a bit-string with the length of TV. 
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In order to write our formula compactly and clearly, and then prove our protocols more conveniently, we need to 
use some general swapping transformations, for example, F;^{i,j), P;^{j,k), A{2,N), ^l(2,N), ^1{3,N) and T{3,N), 
that are studied in Appendix A and we will not repeatedly write their definitions here. 

In addition, we still need to define 



and then introduce 



On = ^{S,N)T-'^{3,N) 



QA{n) = {hn A(2, N) ® 72^) (e„ l23N-2n)) , 



(62) 



(63) 



QB{n) = (/2" (8)T(3,iV))(e„(g)/23«-2„)), 



(64) 



Thus, we have 



9c(n) = (e„ (g) /23N-2„)) . 



m=l / \s=n+l / \t=l / 

/ \s=n+l / \to=1 / \m=l / 



(65) 



(66) 



I ^m^m ) 



_ \m=l 

/ n 



N 



\asbsks) 



N 



\asbs} 



s=n+l 



s=l 



N 



(67) 



ec(n) 



N 



A^Brr^Crr 



\s—n-\-l 



N 



N 



|Cm)( 



A.B. 



^t=l 



^t=i 



(68) 



Similarly, we can obtain the transformed relations acting on the operations (or matrices). 

By comparing with the cases of one qubit, we can extend the controlled and combined RIO protocols to the cases of 
N qubits in terms of our restricted sets. However, we find that the variety of protocols is more obvious, the expressions 
and proofs of protocols get a little complicated. Our protocols are still made up of seven steps for controlled and 
combined remote implementations of A^-qubit quantum operations belonging to our restricted sets. For the cases with 
n < N controllers, we only need n GHZ states and N — n Bell pairs. While when two senders are fetched in, we need 
A^ GHZ states. 

Without loss of generality, when with n controllers, we set the former n shared entangled states as GHZ states, the 
initial state reads 



= IGHZ+) 



N 



AmBmCn 



l^+> 



AsBs 



(69) 



\m=l / \5=n+l / 

when with two senders, we take the N shared GHZ states, the initial state becomes 



N 



= |GHZ+)^^ 

\to=1 



\0 



Y1Y2-YN' 



(70) 
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where \0yiY2---yM arbitrary (unknown) pure state in the A/'-qubit systems: 

1 

ki, -- ,kN—0 

Therefore, we know that the space structures are initiahy 



(71) 



AT 



(72) 



m=l 



for the case with n controllers, and 



N 



=n+l t=l 



N 



(73) 



m=l 



t=l 



for the case with two senders. 

For simplicity, in the following, we only present the operations and measurements done by the three partite sub- 
systems and omit the steps of classical communications. Of course, we still have to remember the implementing 
sequence of them. Moreover, we do not detailedly account for the significance and action of every step, which can be 
understood from the cases of one qubit. 

B. With n controllers 

For the cases with n controllers, we set Charlies as controllers, Alice as a sender and Bob as a receiver. 
The controUers's (Charlies') startup is 



.m=l 



C(ci,-- - ,c„) = Qc^{n) 
Bob's prior preparation is 

Bob's preparing is 

VB{hiM,--- ,bN) = e5i(n)i/2 



ec(n). 



(74) 



(75) 



TV 



.m=l 



X (a^- ® 10)^.^(01 +af- |1)^^(1|)] } QBin). 

Alice's prior sending is 

51<^^(ci,C2,--- ,c„) = e^^(n)|/2n® |^(^ ^ ^ 

Alice's sending is 

SA{ai,bi,a2,b2,- ■ ■ ,aN,bN;x,u) = Q^^{n)<.l2 



v(Cm) (g) l2N-n I4N > QA{n). 



(76) 



(77) 



AT \ / ^ 

1=1 / \m=l 



N 



I J4JV > 6a (n). 



(78) 
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Bob's supplementary recovering is 

7^|f^(Cl,C2 •••€„)= ( 

Bob's recovering is 

7?.s(ai, a2 • • • ajv; ic) = /2(2n+'>) 



i22(iV-n) 



r(c„)' 



(g) /2iv- 



(79) 



\m=l 



\m=l 



N 



^{amV"" Rn{x). 



(80) 



In particular, since Rn{x) [(0to=i '^(cm)^"') 0^2'^-"] -R]v(^) (®to=i ^('^"»)^"') diagonal, they commute 
each other. Again from R]^{x)Rn{x) = I2N, it follows that 



Rn{x) 



' t:(c„)^ 



\m=l 

TV 



R^x) 



N 



t(am)^" Rn{x) 



t(a„j)^'" Rn{x) 



t(Crr») 



m=l 



I2N- 



_ \m=l 



(81) 



Therefore, we obtain a final recovery operation 
']Zf{ci,C2---Cn;x) = 



ao"' x{Cm) (To" 



\m—l 



®{Rn{x) 



) l22(N-n) 



(g) /oiV- 



rUx) 



(82) 



Obviously, such a finally additional recovery-operation is complicated in form compared with the other additional 
operations. Perhaps, it is not worth being used in our protocols. 

It must be pointed out that three times of classical communication arc, respectively: (1) Charlies to Alice or Bob 
n c-bits; (2) Bob to AUce N c-bits; (3) AHce to Bob iV+ [log2(2^!)] + 1 c-bits. (a; may be encoded by [log2(2^!)] + 1 
c-bit string, where [• • • ] means taking the integer part). 

Based on the kinds and time of the controllers distributing to the sender or receiver, we only can use one beforehand 
operation for Bob or Alice or Charlies, which has been seen in the cases of one qubit. The whole operations and 
measurements can be jointly written according to four cases (omitting arguments for simplicity): 

(1) Alice (sender) obtains password before her sending 



Ir{i) = nBSASf^Vs; 

(2) Bob (receiver) obtains password before his preparation 

(3) Bob (receiver) obtains password after his preparation 

2:^(3) = nBnt''SAVB; 

(4) Bob (receiver) obtains password after his recovery operations 

Ir{a) = n^'^nBSAVB. 



(83) 
(84) 
(85) 
(86) 



C. With two senders 



In the case of two senders, we set Bob as a receiver, Alice as the first sender and Charlie as the second sender. It 

is different from the cases of one qubit, where Charlie is a receiver, Alice is the first sender and Bob is the second 
sender. However, it is unimportant since the symmetry among three partite subsystems. 
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Bob's preparation and Alice's sending are the same as the above (|76|l and H78|) . but n = N. Charlie's second sending 



IS 



N 



N 



--m/ (j^^ I 



xT^Miy, v)Rn{x)] ® h.N}Qc{N). 



(87) 



Bob's recovery operation is 



7?.B(ai, 02, • • • , ttAT, 6i, 62, ■ • • ,&n,Cl,C2, 



= L 



23JV 



N 



r^"(c„i) Rn{v) 



N 



N 



(88) 



where x{y) is defined by Eq. H17|l . 

It must be pointed out that four times of classical communication are respectively: (1) Bob to Alice N c-bits and to 
Charlies c-bits; (2) Alice to Bob A+ [log2(2^!)] + 1 c-bits; (3) Ahce to Charlie [log2(2^!)] + 1 c-bits; (4) Charlie 
to Bob [log2(2^!)] + 1 c-bits. 

Obviously, the whole operations and measurements can be jointly written as 



= TZbScSaVb- 



(89) 



It is not difficult to prove our protocols for the cases of N qubits because all of steps are similar to the cases of one 
qubit, which is put in Appendix B. 



VI. DISCUSSION AND CONCLUSION 



We have investigated the controlled and combined remote implementation of the quantum operations belonging to 
our restricted sets jjj using GHZ state(s). The main motivations to use CHZ state(s) in our protocols are to enhance 
security, increase variety, extend applications as well as advance efficiency via fetching in many controllers and two 
senders. 

It must be emphasized that knowing the forms of the restricted sets of quantum operations that can be remotely 
implemented is a key matter to successfully carry out the RIO protocols. In our resent work 0|, we obtained their 
general and explicit forms. Moreover, we provided evidence of the uniqueness and optimization of our restricted sets 
based on the precondition that our protocol only uses N maximally entangled states. It must be emphasized that 
before the beginning of our protocols, we have to build two mapping tables, one of them provides one-to-one mapping 
from TJ^(x) S to the classical information x which is known by the senders, the other one provides one-to-one 
mapping from a classical information x to RNix) which is known by the receiver. Since the unified recovery operations 
are obtained, all of quantum operations belonging to our restricted sets can be remotely implemented via our protocols 
in a faithful and determined way. In addition, although the important and interesting quantum operations belonging 
to the restricted sets should be unitary, but this limitation does not affect our protocol. 

In this paper, we not only propose our protocols in detail, but also prove them strictly in the cases of one and more 
than one qubit. Through respectively describing the cases with the one or many controllers as well as with one or 
two senders, we explain clearly their roles in our protocols. 

It should be pointed out that the implementations of Rn{x) are important in our protocols. It is a key to design 
a recovery quantum circuits in the near future. In principle, we can construct Rn{x) by using a series of universal 
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gates 01 . In special, we have found that R2{x) can be constructed by C"^°* and ax pl| : 



i?2(l) = Iy,®Iy,, (90) 

i?2(2) = C"°*(Yi,r2), (91) 

i?2(3) = c"°*(r2,i"i)a.ot(yi,y2)C"°*(r2,n) (92) 

i?2(4) = C"°*(r2,i"i)C"°*(>l,i^2), (93) 

i?2(5) = c"°*(Yi,r2)C"°*(y2,ri), (94) 

i?2(6) = C"°*(r2,ri), (95) 

i?2(7) - C"°*(Yi,r2)(/®ai), (96) 

i?2(8) = (/®ai), (97) 

i?2(9) = {cji®I)C'^°'{Yi,Y2)C''°\Y2,Yi), (98) 

i?2(10) = C"°*(r2,i"i)(/®ai), (99) 

i?2(ii) - c"°'(^2,i"i)(ai®/)C"°'(yi,r2)C"°*(r2,il), (loo) 

i?2(12) - C"°*(r2,i"l)C"°*(>l,i"2)(/®fTi), (101) 

i?2(13) = C'^°*(r2,i"i)C"°*(n,i"2)(ai0/), (102) 

i?2(i4) - C"°*(r2,yi)C"°'(ri,r2)(ai0/)C"°*(r2,n), (103) 

i?2(15) = C"°*(r2,i"i)(ai®/), (104) 

i?2(i6) - c"°*(Yi,r2)(fTi®/)C"°'(y2,yi), (105) 

i?2(17) = (CTI®/), (106) 

i?2(18) = C"°*(Yi,r2)(ai®/), (107) 

i?2(19) = (/®ai)C"°*(y2,i^i), (108) 

i?2(20) = C"°*(Yi,r2)(/®ai)C"°'(y2,yi), (109) 

i?2(2i) = C"°*(r2,yi)(ai®/)c"°'(yi,r2), (no) 

i?2(22) = C'^°*(r2,yi)C"°*(>l,r2)(/®ai)C'^°*(F2,>^i), (111) 

i?2(23) = (ai®/)C"°*(yi,r2), (112) 

i?2(24) = (ai®ai). (113) 



where C"°*(Fi,y2) rneans that we use qubit Yi as the control qubit, Y2 as the target qubit to do the control-NOT 
transformation, and C"^°*(F2,yL) rneans we use qubit Y2 as the control qubit and qubit Yi as the target qubit. 
Furthermore, we are interesting in the construction of a unified recovery quantum circuit, which will be studied in 
our other manuscript. It is worthy pointing out that the unified recovery operations in our protocols imply that 
quantum operations that can be remotely implemented can belong to all of the restricted sets but not only a kind of 
restricted set. This advantage obviously reveals that the power of remote implementations of quantum operations in 
our protocols is enhanced. 

Form the controlled RIOs, we have seen that the controller(s) is (are) an (a group of) administrator(s) in our 
protocols. If the controllers (controller) accept (s) the application of remote implementations of operations from 
sender and receiver, or intend(s) to let sender(s) and receiver(s) carry out the RIO task, they (he/she) will perform 
the startup operation (controlling step) and then transfer the classical information as a "password" to the sender(s) 
(allowing step) or the receiver so that the protocols can begin and be faithfully completed. When controllers, a sender 
and a receiver share N GHZ states, it does not mean that the sender and receiver can carry out RIO protocols. 
This is because that the quantum channel between the sender and receiver has not been opened. The startup of 
the quantum channel is obtained by the controllers' operation. It is just one of reasons why we use the name of 
controller (s). Then, the controller(s) transfers his/her classical information as a "password". However, as soon as 
the password is transferred, the controller has no any means to stop the protocols. Therefore, we suggest a scheme 
to delay this transmission (password distributing) and send the password (s) to the receiver until the finishing of the 
receiver's standard recovered step so that the controller(s) keeps his/her's interrupting right up to the end of the 
protocols, that is, "saying last word". However, it is possible to lead to a little complicated form of the receiver's 
recovery operation for the multiqubits cases, so we may give up this kind of scheme and put the additional recovery 
operation before the standard recovery operations. 

It should be pointed out that when three partite subsystems share N GHZ states, their position and right are 
symmetric. Therefore, any partite subsystem can be one of controller, sender and receiver. The controller is determined 
by the other two parties' choice based on their requirement of RIO, and/or his/her own decision in order to authorize 
the other two partite subsystems carrying out RIO. If an advanced administrator nominates a controller, he/she can 
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demand this controller to open the quantum channel between the other two partite subsystems but keep the classical 
information in hands as a controlled means. If the number of shared GHZ states is n less than N , only two partite 
subsystems will be symmetric and they can choose as either of a sender and a receiver, the other one partite subsystem 
with n qubits only can play the controllers. 

For the combined remote implementation of quantum operations, we also have displayed that two senders respec- 
tively complete the remote implementations of two parts of a quantum operation and then combine them together to 
obtain the finally remote implementation of the whole quantum operations via GHZ states. Because the second sender 
has to know the classical information from the first sender, the combination of two parts of operations has a sequence. 
This implies that the cooperation of all the senders are needed. It is clear that the security of remote implementations 
of operations is enhanced. The related reasons have been stated in the introduction. This advantage does not exist in 
the RIO protocol with two senders using two Bell states. In practice, it is possible that difi'erent senders have difii'erent 
operational resources and different operational rights, therefore, we can set a suitable combination of their resource 
and right. It implies that the combined remote implementation can overcome the senders's possible shortcoming and 
help us to farthest arrive at the power of our protocols in theory. In addition, it is interesting to study the quantum 
resource cost in the RIO protocol with two senders by comparing the difi'erent schemes using one GHZ state with 
using two Bell state. 

Furthermore, if we wish to consider our protocols with more than two senders, or both many controllers and many 
senders, then the entangled states of three partite subsystems are not enough when only using N GHZ states in order 
to remotely implement the operations of N qubits. In general, for the cases of quantum operations of N qubits, if 
there are n (< N)) controllers and m (< A'')) senders, we need using N EPR-GHZ states at least with m + n + 1 
partite subsystems. 

In summary, using GHZ states in the RIOs protocols indeed can enhance their security, increase their variety, 

extend their possible applications, and even advance their efficiency. These advantages can not be replaced by using 
Bell states. Therefore, we can say the different quantum resources have the different features and purposes in quantum 
information processing and communications. 



We are grateful all the collaborators of our quantum theory group in the institute for theoretical physics of our 
university. This work was funded by the National Fundamental Research Program of China under No. 2001CB309310, 
partially supported by the National Natural Science Foundation of China under Grant No. 60573008. 



In this appendix, we first study the general swapping transformations, which are the combinations of a series of 
usual swapping transformations. They are used in our protocols in order to express our formula clearly and compactly, 
and prove our protocols more easily. 

Note that a swapping transformation of two neighbor qubits is defined by 
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APPENDIX A: SWAPPING TRANSFORMATION 




(Al) 



Its action is 



Sw\oixPy) = \13yoix), 



(A2) 



This means that the swapping transformation changes the space structure Hx (S) Hy into Hy (S) Hx ■ 
For an A''-qubit system, the swapping gate of the ith qubit and the {i + l)th qubit reads 



SN{i,i + 1) = o-Q 



®(JV-i-l) 




(A3) 



Two rearranged transformations are defined by 



j-i 

FN{i,j)= n SMij-a,j + l-a) (A4) 
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fe-i 



PN{j,k)^ H 5^(/3,/3 + l) 

0=3^ 



(A5) 



where Fi^{i,j) extracts out the spin-state of site j, and rearranges it forwards to the site i [i < j) in the qubit-string, 

where PNii; k) extracts out the spin-state of site j, and rearranges it backwards to the site k {k > j) in the qubit- 
string. Note that " means that the factors are arranged from right to left corresponding to a, (3 from small to 
large. Now, in terms of P{j, k), we can introduce two general swapping transformations with the forms 



A(2, N)= II P2N (2(7V - i), 2N-i), (TV > 2), 



(A6) 



Thus, 



N 



n{2,N)= II P2n{1,2N), (iV>2). 



A(2, N) I \aA) 1 = I ) ® ( \b,) , , 



.j=l 



(A7) 



(A8) 



/ N \ / N ^ 

A(2, N) (g) (m^/ ® (2, TV) = (g) 



vfe=i 



(A9) 



f2(2,Af) 



AT \ I N 

(g) 16.) ® (g) \aj, , , 



(AlO) 



0(2, TV) 

Similarly, we can introduce 



N 



AT 



0-i(2,TV)= 0M|- 



T(3, iV) = i^3iv (3i, 2iV + i) , (iV > 2); 
T(4,iV)= F4^(4^,3iV + ^), (iV > 2). 



AT 



(All) 



(A12) 
(A13) 



Thus, 



r(3, N) = {I^N 0(2, N)) (A(2, N) ® ^n) . 



CN \ I ^ \ ^ 

\a,h)j ® (0 I = (g) |ai6ifci), 



(A14) 



(A15) 



N 



.k=l 



N 



\M. 



\ N 

(3, TV) = (m^; ® M|' ® M^^^) . (A16) 
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T(4,iV) (<^\aibiCi}^ ® (^'^'^ 



N 



\ctibiCihi) ^ 



i=l 



(A17) 



r{4,N) 



N 



(g) (m^; ® M|' ® M^-) 



./c=l 



Mi 



(A18) 



' JV \ / N \ / N 

.i=l / \j=l / \/c=l 



(A19) 



r(3,7V) 



■ N 

(g) (m^- ® M|') 



,fc=i 



AT 



AT 



Af 



AT 



^i=l / \j=l / \fe=l 

For the cases with n GHZ states and N — n Bell states, we introduce 

fl{3,N) = {n{2, TV) (g) V ) (/2iv (g) ^)(2, TV)) . 

Obviously 



(g) WA) U (g) |c,) 



Af \ / Af 

(g |c.) U (g |a,6,> 



(A20) 



(A21) 



(A22) 



fi(3,Ar) 



■ N 
.i=l 



Af 



N 



)M^; \ 1 1^-1(3, iV)= ((g)M^- 



(A23) 



More generally, consider the set Qat to be a whole permutation of the bit-string aia2 ■ ■ ■ un, and denote the z element 
with a bit-string form Q{z) = qi{z)q2{z) ■ ■ ■ qN{z), we always can obtain such a general swapping transformation Wn 
that a computational basis \a1a2 • • • aj^) of iV-qubit systems can be swapped as another basis \qi{z)q2{z) ■ ■ ■ qN{z)) in 
which qi{z)q2{z) ■ • ■ qN^z) is an arbitrary element of Qn- Thus, we can write a given general swapping transformation 
Wn {aia2 ■■■aN ^ qi{z)q2{z) ■ ■ ■ qwiz)), 



Wn [0102 • • - Oat ^ qi{z)q2{z) ■ --qNiz)] \a1a2 ■ • -ajv) = \qi{z)q2{z) ■ --qNiz)). 



(A24) 



Furthermore, if we denote two dimensional space Ai spanned by \ai) (a^ = 0, 1 and i = 1, 2, • • • N), while M^' is a 
matrix belonging to this space, we obviously have 

W^^[aia2---aN^qi{z)q2{z)---qN{z)] (^H^^") Wn [aia2- ■ ■ ^ qi{z)q2{z) ■ ■ ■ qN{z)] = j^JJ^^'^'^'j • (^25) 

Therefore, the general swapping transformation Wn defined above can be used to change the space structure of 
multiqubits systems. 
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APPENDIX B: THE PROOF OF OUR PROTOCOL IN THE CASES MORE THAN ONE QUBIT 

Here, we would like to prove our protocols of controlled and combined RIO belonging to our restricted sets in the 
cases of more than one qubit. 

For the cases with n controllers, since 

(/4 ® \c){c\H) IGHZ+) = 1 (|00) + (-1)111)) ® \c). (Bl) 
The initial state is transformed as 

\^%) = C(ci,C2,--. ,c„)|*i^') - ^ (^(8) |Bellc„)^„B„ ® Icm>^ (g) |Bell+)^^.s^^ ® (B2) 

where 

V2 



Bell,,) - 4s(|00) + (-1)'* 111))- (B3) 



Again introducing the swapping transformation 

SAr(n) = [/„®T(3,7V)]ecHn), (B4) 

where T(3, N) and ^(7(f^) is defined as above, we can rewrite 

1 



1*^) - 7ik^-(") (8)1^^)) E 



Vki-kN 

ki ,■ ■ -/cAf — 



m— 1 



(r(c,) ® h) {m^)A^B^y^ + (-l)''"|llfc™)A„S,„y„) (B5) 
I (|00fcs)^^B,n + 111^=^)^,5,^,) 



s— n+1 



^s.H (g)|c.) E 

\i=l / fci,---fejv=0 



m—1 

N 



{h x{c^) ® h) (|00fc™)^^s„,„, + (-1)''"|11^™)a,„b„,„„) (B6) 
(8) (|00fc.)A,i3,y, + |ll^^)A,i3,yJ- (B7) 

s—n+l 

Since r(ci)r(ci) = /2, therefore, whatever Charlies transfer their information to Alice or Bob, all factors z{ci) will be 
eliminated because the product of it and the prior transformation r(ci) gets 1. If we delay the controllers' information 
to after the preparing, then we can similarly discuss in terms of Eq. (|19|l . If we delay the controllers' information 
to the end of our protocols (that is "say last word") in the cases of multiqubits, we will pay the price that a more 
complicated additionally recovery operation is resulted in. In the following, for simplicity, we only prove the case that 
Charlies' information is transferred to Bob. The other kinds of our protocols can be proved similar to the cases of 
one qubit. 
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From Bob's preparing (after his prior operation), it follows that 

\'fP{bi,---bN)) - VB{bl,b2,--- ,bN)r%'"'{ci,C2,--- ,Cn)\^%) 



1 / " \ ^ ^ 

\m=l / fci,---fc„=0 s=l 



1 



=Sjv(n) 6?) |c„,) 



Vm— 1 

N 



All , ■ --kN—O t—1 



hbth) AtBtYt^ 



(B8) 



where we have used Eq. (|37|l 

Actually, the physical idea to design our protocol is to perfectly prepare the state of joint system being in the 
correlated superposition. If there is the controller(s), the whole preparing is completed by the controller's startup, 
receiver's setting and sender's assistance, that V ~ V sV bV^'^C . It is easy to see that 



1 



V2^+" 



1 N 

2/fci - fc« 6^ 



E 



\ksbsks) AgBsVs 



k\ ,■ ■ -/ejY —0 



1 



V2^+" 

/ N 



\m— 1 / 



E 



(B9) 



where we have defined 



(BIO) 



For simplicity, we only need to consider the subspace A1A2 ■ ■ ■ Ais!YiY2 ■ ■ -Yj^ ^ and omit the general swapping 
transformation as well as the coefficient, we rewrite 



V'/) « E 



AT 



N 



\k 



m/Y 



(Bll) 



ki,---kN—0 



\m— 1 / \m— 1 / 

Thus, Alice's sending step and Bob's recovery operations yield the final state in our interesting subsystem as 

N 1 

|V'^""0 (X (g) |a„)^^ ® 



N 



\m— 1 
N 



yfci---fcjv 



fci,---fciv— 
\ / N 



N 



H^- ]TJ,ix,t)\ (S?)|fc„,) 



N 



(B12) 



It is a key matter that we can prove the relation 

2" 2^ 



TJ,{1)Rn{x)= Ytrn\i,D}{m,D\Y,\n,D}{pnix),D\= Y,*m\m,D){p^{x),D\=TJ,{x), (B13) 



m— 1 



n=l 



and we have known that 



^Ar(l) = E ^JiJ2-jiv|jli2 • ■ ■ j7v)(jlj2 ■ ■ • jjvl, 



(B14) 
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(B15) 



Substituting them into HB12|) . we have 



N 



N 



Yl {a,n\H\jr. 



^3i---jNVki---kN 

' N \ /AT 

(5^ 0™| i?iv(x) (g) |fc„,)i. 



^m— 1 / L \m—l / 

((g) (^ml J i?A'(a;) I (g) |fc™), 

\m— 1 / \m— 1 



N 



N 



(B16) 



Because that Rn{x) is such a matrix that its every row and every column only has a nonzero element, we can obtain 



N \ / N 

(g) 0ml Rn{x) i6d\k 



^,m— 1 / 
/ N 

n 

\m=l 



AT 



((g) (Uj RNix) ( (g |fc„Oy^ 
\m— 1 / \m— 1 

AT 



\m—l 



\m—l 



Again from 



we can derive out 



N 



111 

^m/yl,„ X/ X/ X/ ^jf-ONUkf-k^ 

il,--- -JN kx,---kN=Oli,--- ,In 



X 



TV \ / W 

(g) 0ml i?iv(a;) (g) Ife 



^m— 1 / \m— 1 

If we directly act r^(x, t) on the unknown state, we have 

1 



N 



2;fei...fe„T^(l,t)i?(x)|fci/C2 • • • fcn) 
1 1 

^jl---jNVki---kM 

fci , ■ ■ ■ , fcjv —0 fci , ■ ■ ■ ,kN—Q 

x0iJ2 ■ • • jAf|-R(a:^)|fcifc2 ■ • • kn)\jij2 ■ --jN)- 



This means that 



(B17) 



(B15 



(B19) 



(B20) 



N 



IV'lP"') 



(B21) 



Finally, we add the other subspaces and restore the structure of Hilbert's space by using the swapping transforma- 
tions, and then finish the proof of our protocols for the cases with n controllers. 

When there are two senders, our protocol is actually the combination of twice remote implementations. However, 
after the first operation is transferred remotely, the second sender's local system loses perfectly correlation with the 
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remote system to be operated. Since we use one GHZ state as a quantum channel, the first transfer has not exhausted 
all of correlation in the joint system. Compared with the cases of one qubit, we can obtain the method to rebuild 
their correlation through replacing ad by the fixed form of the first operation. 
To our purpose, let us start with the state prepared by Bob: 



1 



■^P) = -=T-i(4,iV)PB(&i,--- ,fo^)T-i(4,iV) 



/2N 



^ \m = l / \m=\ 



N 



yki-kN (8) (iooo^™> + |iii^m» 

fei ,fcjv=0 m=l 



Using Eq. (|5^ . we have 
1 



[/4'»(|&™)(6™|<»(To)C"°*(2,l)] 



(B22) 



\m—l 
N 



,m—l 



X! yki-k„ 
ki ■ --kN —0 

^ ± 

ki ■ ■ -Aiiv 

1 1 / N 

= (A(2,7V)®/4«)(r"i(3,7V)® Vki kji^ 

2 fci---fcjv=0 \m=l 



(crfc„ Co (gi 0-f,„ ) I 



AT 



CTh„ |fc„ 



AT 



\m—l 



N 



N 



(B23) 



Omitting the swapping transformations as well as coefficient and keeping the relevant subspaces, we have 



N 



N 



N 



(B24) 



Alice's sending, Charlie's sending and Bob's recovery operations lead to 



CAT \ / N 

(g) |am)^^ ® 
m=l / 
1 

ki ■ ■ -fciv — 

' N \ / N 



|Cm)( 



/ N 



N 



N 



X 



AT 



H]TJ,{y,v)RNix) 



\m—l 
f N 



N 



N 



RNiy) (X)r(a,„) ]RNix){(X)\ 



(B25) 



Now, we have seen that it is similar to the cases of one qubit as well as the cases of multiqubits with the controllers, 



the proof skills have been shown in the last of Sees. IIIII and Hvl Firstly, in terms of Eas. ljB14|) and ljB15|) . we 



N 



N 



k^""') « (X) |a™>. 



Ill 

J2 J2 "ii-jiv2/fci-fc„ 

jl---jN=0 fei---fcjv=0 il---'N=0 



(g)(a™i) ((g)i/) ((g) ijm)] (f[{-ir-^A 

rn—l / \m—l / \m— 1 / \m— 1 / _ 



\7n—l 
N 



N 



{jrn\ Rn{x) 6?) \kra) 



\7n — l 
f N 



\m—l 



N 



N 



{lra\ Rn{x) (X) |fc,„) 



\rn—l 



N 



N 
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Secondly, from the Eas. HB17|) and IjBlSp . it follows that 
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Thirdly, inserting the complete relation after T^{y) and using Eq. ljB17p . we will eliminate a Rn{x 
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Fourthly, substituting Eas. (|B14p and (|B15(I gives 
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Finally, from Eas. (|BT7|l and ||BT8)| . it follows that 
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(B30) 



where we have used the fact that 

r;^(y,w)T;^(x,u)|c)y^...y„ = 
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/ TV 
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(B31) 



Therefore, after restoring the coefficient, adding the other subspaces and rearranging the space structure, we finish 
the proof of our protocol with two senders in the cases of N qubits. 
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